Informative Information for the Uninformed  


Next: BayesCompare Metric
Up: Statistical Analysis of Duration
Previous: MediumCompare Metric
Contents
ComplexCompare MetricNotice that the MediumCompare and SimpleCompare metrics ignore durations outside the intersection. One might think that such information would improve a fingerprinting capability, however, we found this is not the case. To illustrate, a metric called ComplexCompare was investigated. It was designed to take into account all the data points that don't fall in the intersection of two prints. ComplexCompare computes the metric that MediumCompare does and then visits every data point not in the intersection of the prints, computing duration uniqueness, or packet type duration uniqueness and then subtracting this value from the metric. The motivation for this behavior is that if L contains very unique durations and R doesn't, then the metric should be decreased proportionally by the uniqueness of these values.
ret = MediumCompare(L,R); sum = 0; for every durationvalue d sum += duration_uniqueness(d) return ret  sum;
ret = MediumCompare(L,R); sum = 0; for every packet_type p, durationvalue d sum += packet_type_duration_uniqueness(p,d) return ret  sum;
Next: BayesCompare Metric
Up: Statistical Analysis of Duration
Previous: MediumCompare Metric
Contents
